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REMARKS 

The Examiner is thanked for his/her careful and very thorough Office 
Action. The Examiner is particularly thanked for the helpful suggestions 
regarding correction of the alleged informalities. 

Claim 1 is amended. Claims 2-9 are cancelled. Claim 10 is amended to 
correct an informality. Claims 13 and 14 are amended to correct an 
informality. Claim 15 is amended. New claim 16 is added. These changes are 
not believed to add new matter, and their entry is respectfully requested. 

The foregoing amendment to the specification is submitted to remove a 
typographical as pointed out by the Examiner. This change is respectfully 
asserted not to introduce new matter, and entry is respectfully requested. 


Claim Ob jections 

Examiner objects to claims 2, 3, 10, and 15. Claims 2-3 are cancelled. 
Claim 10 is amended to correct informalities as pointed out by Examiner. 
Claim 15 is cancelled. Therefore, these objections are believed fully addressed. 

Claims 2-9 are also objected to, and, as stated above, these claims have 
been cancelled. 

Claim Rejections under 35 USC 112 second paragraph 

The various rejections under 35 USC 1 12, second paragraph, have been 
addressed by the amendments to claims 1, 10, 13 and 14. Claim 15 is 
cancelled. These amendments are believed to overcome the 1 12 rejection by 
correcting the informalities pointed out by Examiner. Favorable 
reconsideration of the claims is respectfully requested. 

Claim Rejections under 35 USC 101 

Claims 1-15 were rejected under 35 USC 101 as inoperable. Applicant 
submits the foregoing amendments, limiting the number of ciphers to two (in 
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other words, in the claim language, r=2), which addresses the inoperability, as 
discussed below. 

According to the Blind Key Encryption algorithm described in the 
present application, Applicant generates two ciphers M, and M 2 as follows: 


M, = M cl+, modn. 


e2+t. 


M 2 =M e2+t modn. 
From the above two ciphers, one may calculate a value M 12 as follows: 

M i2 = [Mj.CMb) 1 ] mod n 

So the value of M 12 = rM el+t (M e2+t y' ]mod n. 

Therefore, M 12 = [M el+t .M " e2 " 1 ]mod n. 

Since the base is the same, adding the exponents in the above equation, 
M 12 = [M cl+t e24 ]mod n. = [M e, e2 ]mod n. (t disappears since t-t = 0) 

Now, Mi 2 is a cipher with a definitely known exponent, e r e 2 . 
This is how an attacker can eliminate the random number, t, from the ciphers. 
Now, he can compute the multiplicative inverse of e,^ which would serve 
as the private key (decryption key). In other words, the attacker needs to 
compute a value d| 2 such that 

(e,-e 2 ). d 12 = k.(|> +1. where k could be any integer. This can be done by 
ranning Euclid's algorithm. However, in order to be able to do this, the 
attacker needs (j), which is never known. This is because ^ the Euler Totient 
function, is discarded immediately after the keys are generated. No record is 
maintained of it by the key owner. When the key owner himself has no idea of 
it, there is no way that the attacker can make out its value. § can be known, if 
the key modulus, n, can be factored into p and q. But this requires 
astronomical computation effort over which the conventional RSA algorithm 
is based. 
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There is another approach to computing d 12 mentioned in the above 
paragraph. That is bribing some one at the key owner's location and getting 
the private key of my Blind Key Encryption system (d„ d 2 ) revealed. Recall 
one of my key generation equations 

d,+d 2 = k 2 <|>. So from the revealed key, though 0 cannot be known, a multiple 
times <|>, that is, k 2 <t> can be known. Please note that $ and k 2 $ behave alike. In 
multiplicative inverse calculations 0 acts like a slimily of zero in normal 
mathematical calculations. 

What Euclid's algorithm does for us is given two known values e and 4>, 
it will give the two values d and k satisfying the relation e.d = k<|H-l. Out of 
these two values that Euclid's algorithm returns, what is important and useful 
is the d value which is used as the counterpart key (private key). The other 
value k has no significance. So the attacker will input the values (e^) and 
k 2 (J). Consequently, Euclid' algorithm will return him d 12 
satisfying the relation (e re2 ).d 12 = k (k 2 .(j)) +1. This is again fine and acceptable 
because in place of k, now the attacker has k.k 2 . Any multiple of $ is 
acceptable. 

Finally, the extract of the whole above discussion is that the attacker 
needs the private key even after capturing both ciphers. This defeats Moore's 
attack, which teaches that the original message can be recovered without 
private key when both ciphers are available. 

Now, we discuss die case with many ciphers. Assume M, , M 2 and M 3 be 
three ciphers computed as follows: 
M, = M e,+, modn. 
M 2 =M c2+l modn. 
M 3 =M e3+, modn. 
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Compute M12 and M 23 as follows: 
M, 2 = [M,.(M 2 ) mod n = PM^lmod n 
M B = [M 2 .(M 3 ) " 1 ] mod n = [Mf 2-63 ]mod n. 

Now, the attacker has two ciphers encrypted by two definitely know exponents 
e,-e 2 and e 2 -e 3 . This is sufficient for the Moore's attack since what Moore 
teaches is that when two ciphers are available encrypted by two definitely 
known exponents, original message can be recovered by finding two integers r 
and s such that 

r(ere 2 ) + s(e 2 -e 3 ) = 1. 
Since e^ and e 3 are known to the public as public key exponents, (e,-e 2 ) and 
(e 2 -e 3 ) can be calculated easily. Consequently, r and s satisfying the above 
Moore's relation can be computed. Finally, the attacker can compute the 
original message M as follows: 

M = M 12 ' M 23 s mod n =. [(M 61 -* 2 ) r (M e2 ** 3 ) 5 ]mod n = M r(e, ' e2) +s(e2 " e3) mod n 
= M'modn = M. 

In the previous case where we have only two ciphers, we are saved from 
this attack because when t is eliminated, the ciphers will reduce to one. With 
the single exponent, (ei-e 2 ), one can not find r such that 

r.(e,-e 2 )= 1. 

This is not possible. 

By the above arguments and the present amendments limiting the 
number of ciphers to two, Applicant respectfully submits that Examiner's 
rejection of the claims is now moot. Favorable reconsideration of the claims is 
respectfully requested. 
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Conclusion 

Thus, all grounds of rejection and/or objection are traversed or 
accommodated, and favorable reconsideration and allowance are respectfully 
requested. The Examiner is requested to telephone the undersi gned attorney or 
Robert Groover for an interview to resolve anv remaining issues. 


Customer Number 29106 

Groover & Holmes 
PO Box 802889 
Dallas, TX 75380 
Tel: 972-980-5840 
fox: 972-980-5841 


March 17, 2006 


Respectfully submitted, 



Patrick C. R. Holmes, Reg, No. 46,380 
Attorney for Applicant 
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